Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/af0fd726-cb1e-30f2-b79c-ec1784bf37cc.roa
File:                     af0fd726-cb1e-30f2-b79c-ec1784bf37cc.roa (raw, json)
Hash identifier:          Bc93PsbJpama736BYn+P6zSIn4xD2SWc12aytkjlIT0=
Subject key identifier:   8E:94:61:79:CF:47:AD:31:CB:69:B3:9A:A1:C2:AE:8E:36:6D:38:39
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA204BCCEA05D6AC7B3000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/af0fd726-cb1e-30f2-b79c-ec1784bf37cc.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        172.252.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:20:4b:cc:ea:05:d6:ac:7b:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=6bd84631-6ce5-418d-a3ae-65ee4dabaaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:f9:28:61:4a:30:4c:52:f9:4a:4c:4a:6d:
                    2e:d6:51:d4:98:d2:22:79:5b:82:9f:ac:e6:3e:b5:
                    c7:c2:a6:61:f0:0d:d1:f3:dc:01:1d:ca:44:f7:6f:
                    de:18:74:e4:ec:38:5a:ae:04:56:25:d6:09:6b:1b:
                    be:cf:ea:98:05:e6:62:2e:3b:6b:cc:65:00:9e:f8:
                    13:dd:e8:60:90:93:04:cc:8a:64:62:ea:4e:0b:fd:
                    c1:49:63:ba:22:a2:da:e3:bd:b7:53:29:86:d4:59:
                    b9:1e:71:92:23:ab:9b:0c:93:e0:87:0e:0f:45:f4:
                    fc:52:3c:48:25:02:91:91:02:6b:44:94:61:2a:f0:
                    12:fa:dd:b7:33:7b:f4:b0:94:ae:b6:b5:8a:26:ee:
                    f2:0c:99:fd:b1:bd:b5:59:9b:1e:73:11:e4:b1:57:
                    55:a8:95:98:0e:e6:ad:2a:86:bb:64:b3:51:4b:17:
                    d8:fd:c8:ff:ac:c4:4c:ab:d9:86:d6:df:b4:fa:dd:
                    ef:7a:cc:15:b7:2c:3b:b2:9a:77:f8:93:14:21:b0:
                    a9:e6:8b:b8:81:93:cc:b7:99:e6:0c:e0:54:6b:1c:
                    d8:51:56:24:2a:1a:40:b8:1c:c7:5a:de:87:13:5f:
                    47:ab:ff:03:02:ac:2f:5a:dc:90:31:cb:23:4a:a8:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:94:61:79:CF:47:AD:31:CB:69:B3:9A:A1:C2:AE:8E:36:6D:38:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/af0fd726-cb1e-30f2-b79c-ec1784bf37cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:28:73:85:6b:9b:9b:36:8f:73:87:f1:18:05:7c:56:19:e7:
         38:c2:ea:14:60:5d:11:4d:25:84:3c:6c:79:39:0b:b6:d6:60:
         9f:95:8a:9a:3b:4f:41:48:97:80:e3:da:0d:52:7b:ab:ea:ce:
         56:43:06:c6:ee:6c:77:8b:ba:dc:a4:df:e7:ba:6c:e3:3e:ea:
         cd:9d:0f:63:ff:cc:89:5a:9e:0d:76:17:ce:c7:7d:8a:30:77:
         c1:15:d9:1e:12:6a:2d:e2:df:1f:68:b7:2f:dc:03:16:a8:6c:
         13:27:37:94:7d:69:c2:b3:8a:d3:26:42:83:48:42:2b:6f:f2:
         83:24:a7:8e:44:26:18:fa:b2:92:40:e4:e5:1c:8f:28:69:dc:
         44:6b:6b:b8:ed:1d:9a:97:74:4e:d8:be:7e:f6:1c:21:4b:51:
         b8:cc:00:7f:b3:36:a8:1f:b5:16:ca:33:ca:7b:59:cf:1f:20:
         8f:cc:e5:12:65:fa:7e:8c:c5:3e:4b:00:ae:bc:e2:05:00:2e:
         f3:60:ab:77:af:07:36:b1:5a:44:2a:ea:e3:ba:98:bb:30:13:
         2d:32:1e:92:1a:65:9b:38:47:d4:27:7f:1c:72:23:ae:76:fa:
         5d:d2:ac:30:2f:aa:11:95:d1:d0:f5:9c:c7:72:bc:6b:91:dd:
         36:7c:a3:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuiBLzOoF1qx7MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NmJkODQ2MzEtNmNlNS00MThkLWEzYWUtNjVlZTRkYWJhYWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6v5KGFKMExS+UpMSm0u1lHUmNIieVuCn6zm
PrXHwqZh8A3R89wBHcpE92/eGHTk7DhargRWJdYJaxu+z+qYBeZiLjtrzGUAnvgT
3ehgkJMEzIpkYupOC/3BSWO6IqLa4723UymG1Fm5HnGSI6ubDJPghw4PRfT8UjxI
JQKRkQJrRJRhKvAS+t23M3v0sJSutrWKJu7yDJn9sb21WZsecxHksVdVqJWYDuat
Koa7ZLNRSxfY/cj/rMRMq9mG1t+0+t3veswVtyw7spp3+JMUIbCp5ou4gZPMt5nm
DOBUaxzYUVYkKhpAuBzHWt6HE19Hq/8DAqwvWtyQMcsjSqhu1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6UYXnPR60xy2mzmqHCro42bTg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYWYwZmQ3MjYtY2IxZS0z
MGYyLWI3OWMtZWMxNzg0YmYzN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMoc4Vrm5s2j3OH8RgFfFYZ5zjC6hRgXRFNJYQ8bHk5C7bWYJ+Vipo7
T0FIl4Dj2g1Se6vqzlZDBsbubHeLutyk3+e6bOM+6s2dD2P/zIlang12F87HfYow
d8EV2R4Sai3i3x9oty/cAxaobBMnN5R9acKzitMmQoNIQitv8oMkp45EJhj6spJA
5OUcjyhp3ERra7jtHZqXdE7Yvn72HCFLUbjMAH+zNqgftRbKM8p7Wc8fII/M5RJl
+n6MxT5LAK684gUALvNgq3evBzaxWkQq6uO6mLswEy0yHpIaZZs4R9QnfxxyI652
+l3SrDAvqhGV0dD1nMdyvGuR3TZ8o4s=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:39 2026 by rpki-client